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u m m nt # 



1. —tfr^te, 

-f SUM*; 

#48 JWL^M^ fa$r%n ik$L%. 

xfr A*4S* # 41 *l £ jL4&i*. 91 sMT * 41 , ^* * *i£ &4Hfc?'J 
ifci«iMr#4lJ|U fc £iMr#4!#*. 

6. ;M»J4Ml4/*i£tt33r*, afete**«tf##4l;fc*«*:###. 

4h***41. 
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a ffl m * 1? JI2/5W 



10. mi $.9 w &&temT£-Ami—£$LM-tfi£-& 

11. 4M'J^^10#ri£<Kr^,&, ^-t^^^^^-^-^jL^iEB^^^ 

12. ^0^^9#ri£#4&<?a, i£&^i^^^^^#^lWMi-^ 

14. ^ * 0 ^ >£l 2 i£ # *fc , i£&te/3i^<J/f]^#^43;faM£U& 

15. ;JM^>£9#ri£#4&<&, i£&&ftT&ffl&&Kjf'&%L±.&& 

17. — ^t^T^, 

18. ;M«^17^i£#^>&, &*&&fo%tfl4&Lm%t#l&teftiX%L 

19. ^L^JJ|-^17^ril^^r>*-, ^t^^^&^J-^ifc^^^ 

20. *L^^^18^T^^^>*r, £-t^^4^^i±#l&#^i±^£. 
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a ffl m * 1? JI3/5W 



«* ^Lt^j *4a ft 4 - 

26. ^J^-*.25^riE.^^r*, ^-t^^"^^^^i±^^^^-#'J^)^- 
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a ffl m * 1? KI4/5W 



31. fr%]£:%L29W & t /fl "f ^ **J3Uli±«*$tt4-fe 

33. ^^'J^-^32^r^^^^, *t#1^###3it*u±^##4^£ 
*i iff 4 . 
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U m =ft 



mi/1631 



ir* 

2. 4%i£ 

i& "T^t^" fiLft&S. i&WfrTfL, W-k?®1&£L&)&-F) &itJgtiSLtf) 

^^^^*A^^#-#J^i£^ Diffie-Helman (DH) &4fl3Ufei±^. 
^it^.t» foik&M. Rivest, Shamir ^ Adelman 
(RSA) (ECC) ^*t. &*7, 

#!HiEitWsUfJ RSA ECC 0fi5<*i|t£iSl:M"— 
— JL-^T it W (identity ) , &.*J-#^ *$4s««. £.*L*f^ffr 

^^^iSl-^f'JitW (OEM) #Jl#. 
JL, + : 

^iMNMfcttTi*-^*!* (TPM) 

H 2i)LW&te® 1 #TPM — 

3 3i)LW&te® 1 <Hr TPM 

m 4 J &Lty#}m TPM ^£ if 

( Direct Proof ) ®; 
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tt m ^ Jtl2/16W 



W; 

3 10-12 A#-#^^ 8 ^^^^m^>r^it^^L^M,^A^:3S^^. 
if'J^^.-f jL^-iiEW^ Diffie-Helman 3UfctMSl£.A/*f-&'te^/ 

iiE«fl (dp) ;Mr#4& (*HMJ-f*-£ ) *4*A<MLJl#tfL^ 

^ ^- % & % % t # ^ ft- . £ 91 t *t * & # * 38r 4t it if A «. # * 

^^t^^^LJL^^^^^-ST^^*.^ 300 J. 700 f T^'J^ 40 
>M=1f . ^^feffi^*.i*^i-f jL^iitW^ Diffie-Helman #$j£.4fc*T* 

^l^j^^ £*fc*i t , J: t A#Jfl 3tS-^^L DP 

^^fste^H 5 ^^ (intervening) &te£^*k*t3£ £ £e,Jli##: 
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tt m ^ SI3/16W 



Hlt|l*a, 4r*?fa. ^*J^^n/ 

Hi. *#N &*£#Li£ (trace) „ *iE.J*|*4**. 

t-*^^T^"^-^> 10/306,336. "System and Method for 

Establishing Trust Without Revealing Identity" I^J 0t# ^ # ^ #'J t 

(family) , *>&iM2L4f#W ;fcXA$4S*#*E. 

ik$L4f%$L&— +ML'*-&frft#&&*t (Fpub^Fpri) , £-&#>Ji4L 
^iXtk. WW Fpri, 

<$L—tfj&&i£-WfrJ[£r&%® (BFpri) . ^UmmT$Lik'*&%& Fpub 

DPpri m$rJ&¥l&fttil&. &fttfl1k&XjkTK 

, « & DP mm ##*>i^ij t . 
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itt m ^ H4/1631 



^ "TPM" ) 102 (t^H) J^iH^-^ 106, 

104 (^^# ) ^^^'fe tl e>^-ff-,|r. "fc^-*^ 
106, 104 $k&ftT$^¥)^.% 108. 

3*h, ^THS^^» 102 -*ri&^#rj§Mti) & — 

110" ) #Ji£<#^i^-^^#4t& 108. *J"f 91 

^— 102 iton^^-^G 104 ^^.TF^^-^^^i^J^^ no 
^•^^6t^^^t4 (tf-J^^) . T^#it-^H^^^'J-*#- 106 (^^/r 

^^-^^ 102 — ^£ 104 *^^^^J« no 

^,1,108 (^/r^) #f — -£p^il^fj&i&. 

^WflW-^^t' #-="f-£ 104 &te*Tit^£«#: 
( TPM ) 115. TPM 115 %L&%L%%\*k1§ 110 /^MMiltf 

— -M£;&#>Jt> TPM 115 &te*^^#/Mf^l*)#;^*>i 
^^^*t3£^„ #TPM 115 SC. 5.^1^^— -*p-£ 102 4MJW*4k, i%it.% 
fttit'51&&m%.&&JL»ji*Ltil TPM^Li^^. ft ft tftft * 

^M^t TPM tfj&^^tstfi^ifrtfjfiig-. 

m 2TtLW£r% TPM 115 tfl%^-3(-<2 104 6^ — *t^>MC 

104 fete*^S»J TPM 115 #J*tSH 202. it 

*tS1£202 A*tSit&<Hf3ii. #'J>> >£;ML9m— ^£;&#'Jt> 

*l***-***nPMJ (FPGA) , 
4MM*-JMMf ^# (TTL) it#* Jl4MM.£/*fl*A'fc*' (ASIC) . 
^— -^^ 104 i£&te^f&-¥-7L 206 vX/Li$&& 

^Jte "X" ;M^# "Hash(X)" . «#S£#*$#AT«**-iMM£TPM115 
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itt m ^ Jfl5/16W 



S 4^7&te*J/3@ 2#TPM 115^^^^it^*L^^.300^ 
-¥-£(#£;&#l.if ##L&lfc 300 302 ?M&^3iJ,&i£ 302 

U 310. \\%fa%$L 300 i£&^i>?H£-¥-iG 304 ^#&^>f$#-7L 306. 

304 A^-##&*t3g|f. 310 $Lfttf)1£&frj% 
iU^H 304 i£^i^HME*tS|| 310 

^iil^#MMS§ 3io 

H. 306 ^^^i &^<a^p^^J JL^^^^-^^^H 

( ROM ) . 3Lft$k%-7t 304 ^#^>^##-/L 306 ^^MsS^iJ 302. 

&^$LW¥}— ^£*fe#lt, 300 
308, ^-J^^fit^^, ^X^^^^5E^^i£T^#:^^^Jit^^^ 
M. 300 EUQ •T&tiki%&frjfe4-. 

ifJM&i&tt, 300 5£-sru*i£it&£fc 302 ^MS^f'J S ^ JL 

^ife) , it^^^^J^AI l ^*l#^'f (CRT) > (LCD) 

^^#^*fr>MiJL3i6 (^*»4*Jt> *4*it^) 

^f'J&lfc 302 ^^^#>f§4^/^^4^^##ili^*hS^ 310. # 
*^#;fl/4fr>^&£^;fc#4£*J#^ 318, *J #Li£.J£> fckSUSU 

)S4^^^#^-^^, 310 

^ 4£#J.S.tf& 314 _h#;fc##^. 

n #-70 320 3£$Ufe^#J 302. ^ a #-tg 320 # ^#«] 

mkr^n¥i—^^¥im.^^^¥^vJ a sin^hM., ^ 300 
^um.itifrm.ni&&m9Lfofate&H£ A-%-r i^n^ 



11 



200580030718. 4 



tt m ^ JI6/16W 



^ "Tit"" *^HH**-*-l»^i*-l»» 304 
-fr^i^J. 308 + , :ff#*tS|| 310 jklfM&lT ft 

*J-**e-f-£i*Mr "*pflr#" *HMH*«, ^xt^JI*)^*)— '^i5l£'^ 
*^ffl^J.i&^i£-^$■^ ^ ^ -W*»@9^^*J|&314. if IT, i£4£iyft*#.«' i T 

l$1ie%fb&T£U&^&.te¥lX®,, ik&f&*tf&^ &&&&&&&& 

-§£-#JJ^i2L#F Diffie-Hellman (DH) ^#j£J&i£^. £i£i±^*r*, 
^J.^ge.«£— ¥j&-£r/fr% RSA ECC ^43*t. J &%L%m^*>W¥i& 

^-f i*^iiEit^^ 7 RSA ^ ECC /3f «3t£jfc* 

— * ft 4 # ^ i* m &l\%-¥> &&ik&7Ltfi«% 

^I^JiA^^w^ "cookie" . ^fBt, ■srtt^C,ii*#*E^#^ — 

£ 2004 Wit&^%T%#3fi*%#¥} , "An 

Apparatus and Method for Establishing an Authenticated Encrypted 
Session with a Device Without Exposing Privacy-Sensitive 
information" > 10/???,???# ft Ht#1r#^M'J 4$i£7 — 

Diffie-Helman i±^*M*Jfl t# RSA & ECC ^43. ^TUftM iZTT&tf) 
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tt m ^ Jfl7/16W 



— ^ # — iR #J >ft 4 . 

£_&jSLtyfr#%&, ik$4R^M^T RSA ECC $43. ^T^,^^ 
«-;MM**jfcttA4a. **W#*ifc«llUt7— #/fl^*#«*£X£ 

-£ * A *e w # $ ® * * # 4g ** * m * * ^ * jl t ^ * * # 

43 ( DPpri ) $ , M&Wm &±&&J?k&&ft&ft ft 

$rft&i&m.%>tf)%L%» ^-^^^^J^T^^it^t^^— 128 

^^^gi^j DPpri ^43. ffl 5 A^^^X^^^^^^^^LjL^iita^ 
&4fltf 500 ^bit^^t^"^^^^: $L£.M*k%Lfc&'&i& 

502, ^X^JitiA^tt, 503. ^i&i+^MKi&M, 504 JUL 
522. £A#]i££^^}fc&fe4£fl£.i|£J- 506 <Hl#Jat^ift<Hf2t-ii±^* 

502 -5r^*.JLHWitW*#, $L&fe& 

#Jt> ikgLfctf % £ £fc "T m 506 &*H£ 

^^#^bTt^X^#^^'li^#^t^^^L^ RAND 508 3*^43 
J&^'^&^tft^J'tfL 509. 

^M^&#Mf^*4^^lt 512 ^>T#ti£^^i^*^ 

( keyblob ) 514 ( # 

4fc^i^^^;&) . %4ftik 514 feteJ-^-=->HGU£^. _MHaL 

Wfr%%® (DPpri) &^&5^X>fl^i2bft^fc<#^43. DP 
^■516 ( DPpri fe^#.#/ t ^^^^4^^-^«-^^^r^^^ 
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tt m ^ JI8/16W 



SHA-1 # DPpri — & ^sfctfil *T SI &te^BUM^4fcT6j* 

(iv) 518, ^^*&^^^^^^^--^p^^tb#^>a^ii^^^i±ii 
/a iv. m IV #^##^^^^4^— 

(^jaT#^4^ii^ ) , jr&&fa&Jl&&n 522 ^^^^4^^520 

511, &m^&1tfc&f&fr&fr&^^Wtt&i&& : ^<. 

504 I*] &^#3tJ. 506 ^f5t^^-^6t^^^, i^r^it^ 
504 ^i^^^^^JJPL^>*/^^^^#^^T^--^'^ii^>^ 

43^514. T^^^5.^^^^^^^^^/"^--^^^^^^^524 

526 506. 

^>^^l^ ^^.^m £-&vawm®tfjzr&tfj # >&3E ® 600 . fate 

^602 ^^if'JitW^/ t W 604. ^jtb^^-g 7;^$*^'^^^ 

#4r*fc.,&, M.'jr&&m+rtt#.: &rm\%-fc&^^SLVfr&L 606 ^ 

a 7 Ai^B^#.#^^^^^^m^^^Jil^^^^^4S:*k^^^ 
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tt m ^ SI9/16W 



mm 700. ^T^^^/ t ^5.^1t^^S.#JxtW^.#^^t3S. 702, 
**«i4JfJfc.a.— ******* 522 *.jL##4H4Mt**.. * 

±A**t + */fl***t***MflB. ^^704, ^XtJifcHi/**.— *#4H 
**4S*AMT#4A*i-. ttfc^J***!^*******/^*^**! 

#■#**. *£*&#!! t> ^«£******t^$M£^** 

4S-&7**^" &48*t . xfr -f & it $ /3f ^" *t3£T ^ ^ A i — -^it & 

#Sf$l**^*&43 507 #i£i&HMat***#«.502. 

@ 8^^^#.*^il^^*^^*.i*Jit*A*h3a^3ft.^ffl 800. 

^^*Wt. *.JL^JitWT«^^*j3t^*^«. 502 

£#t 802, **HWitilf^#*#*«it*&*.JL^i--*JlL*iiE 
W*k%4ft*t ( Fpub ^ Fpri ) . #*«£— — * DPpri ^43, 
^£^T& Fpub#r3M'J>BJ DPpri /^tft^g. — ^^ti^JS* &te*H*Ti& 
JL***^*, «*»—*ifcJt (*P**tt*3a) *J^** 

^#*#^]i£#J^.J., **&*** 502 512 
$Mf* 804 J- 820. -fib, -&&804, it^^^^L^^— *"£— tf^Bi 
4Mfc ( RAND ) 508. *^;&#'Jt, RAND #-Mt A 128 Hs#. 

^i^fti^^^M. ^^ 806, #]/i|*i**/*iL#tt+rfiA*f. 

i£it/k>2»MU&«£--# RAND 'IS. ( SKEY=f ( RAND ) ) **t# 
SKEY. ^Jf^&^T^^ittfJi^S tttt'fiH* 

( ^Jtftp SHA-l, MGF1. #U&>fc^#>fc (DES) > S-^l DES, j^lOu^ 
#$L (AES) ^) . 808, *£;&#lt> «£.#.*#:>*£.—* 

(ID) •&#/»!;*.£****** 522 _h#^#t£U&^ 

520 514, i&i±*»J*J SKEY iM*^ — *"£%/v" 

(^>J>!>-*^^^l5r ) (^S- ID=*'J/fl SKEY^^ (0...0) ) . 
t^t. ^ ID a*-* 4 ^*., J&^*r>*& SKEY 
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Tft Dl U 3S10/16M 



-&T;£, £#:810, it^^^^^^^^-i^^t^^^ (Fpub) 
DP^^-^fc^ DPpri. £#t812, i£jL/&&#fc#J^ Z***¥i7r 
>&( #J:fcp*J/*) SHA-1 il^ — #t?'J )*t DPpri i£#-&?'J l*/* £ DPpri 
£^814, *£A**#**i*]*#tf *#4&* 
J. »Jr DPpri ^ DPpri + . 

pT^^J^ SKEY ^-ii* 
-tMW^&^i^&tf #48*514. £*816, T»Ti3*£*4H*#t#* 
520 (entry) 1 808 f- &. ¥]$L % ID 814 

*»&&4fl* 514. ^£;&#'Jt, Tfc^i ID ^M^#^*£U& 

/£t . £*818, TfiS*^*^*** 510 t^#^* RAND 

£*820, ^i2-UW«r SKEY DPpri, 0 ^ 'tfa ^M-Q 

i. 

DPpir #h£-*H*Jfc*»StJ£#J# SKEY # 4£*T 
SKEY tf£4M.SMlJt DPpri U^teft^WG SKEY 

^^^^jfe^r*.*^**^^*.. t^>&^&D£&#>9I#3^ SKEY 

teJfl^^*/f*##tt3r*. £it#ttfr3&T. DPpri «**^>tfL#^A<Sfr 

£* 820 JL&tij&ttrttii , £* 822 , *T -^AMfr&'ff^ # RAND 
4t*m#J*Ji&#J*Ji&£>*#«.503, 503 #£#]iti± 

*MPjafc4HMF**tt. 502 + *Jlfr RAND ft. |t^, £* 824, *TB*£^ 
522 JUH******#***tt ****** 520, + 

© 9 jt*w#*^«.w**«***.x«it^.A*ta*osMis 900. 

+ ^^902, iMdifciA***.^****** 

+ *sMMI#* RAND a. -f-AT«*rfl*X 

>JHaH*afc5ttt RAND ft. >^£;&#'Jt> ****.*t45-#*fc^ 

TPM. £ — ^^«fe*it. T 16^^##£&'fcMH*&t 
,?HH* RAND 0L. £* 904, ^ VA &i£%L3-tfi # ^ ^'I^^H t 
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tt m u mi/lew 



3t8?$JJMH^*gMB 507 <Hf#t?'J 509. ^U#)m&Hej*> 

*#*t>frj***^<lL. ^^906, — .9-^ RANDAL # , 
*P A^HWati^lttfcit^r*^^*^**,* 510 ti£j&^#r RAND # 

+ , ^«*>&*JiMLJL#i±^t'fi>l*fci* RAND 

M.^iSMik±^^^^r^^^)^^^^S.^J^^^M- DPpri ^ 
^ift^^iMir DPpri ^^^J.^^^J^^J. id, 

SKEY*»&4*&. i%$l£ftte$L£ ID^^^^iH^J^Jit^^^^)^ 
&±K&$k.m%- 510 *3t#>iHi*. ^T*^"*t» *fli£# 
*^t«*^BR*^^A (*.JL ID, *4B*) iM**. ^^^PitRAND 
Dppri <Hf4i. 

® 10-12 Ate*M^£^£^]#^^#^#^#^^^*t^***fc 

^l® 10 ^ifil^ 1000 ^f:*&, ^L^: 1002, *T Tt^M^&r 
m\ %-3frTk$LX#inL&mito 526 *.*,*J£.;**fc 

1004, it^.JLJB^M^il.^e-ft^^*.* 506 
^^-5:308 t^^^^ 1 ^^^^^^^ 524. 

i^— #^^^^h3S, f^ljta^* 1006^^^. >ifl^^-£, 3fc>£ 
^ 1008M^it#it^S. ^^ 1008, j;3E^H^ig-5. 506 * — 

1010, ^^j:^^^^Ji|[^^Ciii^^^.^^-^^ 507. 
£*«t 1014, *«.JL4t^.**t^#4flJKL^*#4«. ^iamH 

a. 
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1ft HJ5 15 3S12/16M 



%48®Lfr^&iM®$krt 509. ^^-^^^^t^T^^^i^^^^^JifL 

1018, i£%L%fem #]%-fa f ^AU£>>v# RAND >tfL 508 
t-H-^i£2t#^ SKEY (SKEY=f (RAND) ) . 1020, it 

*.Mli*J^ SKEY >h C*!*^****^) 

M.ID=#)m SKEY^t (0...0) ) , ¥j$L£. ID # 

^. *M£ffl 11 tfSfc^M llOO^^i^Wt^hS. 

11 tfjVt 1102, it^LXAi— ^f#flt*t#^ Tkey. 

#^JB^^^^Ji£;£X#>#4. £=&1104, Tt^^^t^fe^^J- ID 
*»#Hfr*M*af*l Tkey #4Mt fc^**-** 4, #Jfl£* 1014 4MfcJL*t 

^*^JKL^-*JK.aHfr* 4 . ( &t tiftait^WM 

(^-XlD, Tkey) ) . 4^^&*>^J5 #iURJ>J , 3? 

T 4, 3t^#^3«t#^^^^^-^^^ 

(Skey) , mft^£r%®fo$iz£~&%&> f&&*\ftT£& : &%&1* 1 ^ 

ik % 4 . £&ii06, £#*j***#flfl»4m*#Mr«* 5ii 
%r$LtL**3Lik%%. id (^«>14tM) , # is* 
$i%Lik$LS.tfifa%ti<]%4ft)k. 1110, T&%L&&f&fr%&3L— 

4&6^Bt*t#^#i Tkey —"ft #5*4. ^ 43 "6 = ( a£ 

*J>*) Tkey^n^ ( ^ # ) ) . Tkey*H£;fa^ 

?A^i!r&to& ft &&&&&&&&&&&&&&&&&& 
Bt*M£;fri*.£, E^^^Ti**^**:**^^ "cookie" . ^T^^t 

%L%m^J& fa i£^X#J£i£ ft 4 . 
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Tft Dl U 3S13/16M 



1114, **.i^|t— «*A>HAtlt*.*^*#^, #J/fll#Bt 

+ t&£U® 12 tfiMffl 1200 mm&4fi3i 

12 tf)*k 1216, *M£X#Jfl*MfcSMfc SKEY*J-*"&#£4a*at 
*Tm#M? : &- DPpri DPpri «Mt. **.*t#^»» t##* 

J&'tfL ( If /fl SKEYtff-^ ( IV, DPpri, DPpri ) ) - 

T«*-£## 3 fr^'ffclSjX (IV) . #i^.£#t 1218, «^LJLilii«. DPpri 
iMJ DPpri #*;iM££r DPpri 4*. 

A****. **Jtat»£ DPpri <ft#*&** 3 fr*t#*3. 
#j t*£^^#^4^^##<&T$l£/M-iM^ ei^A^Jfclt^T DP 
iMrfr*J. £#tl220, *3fcJL&#— >Mfrtt IV, *Mifl*ftf IV4i* 
— >h*r^*«^f ^^J*,4fc^* (**Mfc&#*k=#J# SKEY^^ (IV2, 
DPpri, DPpri ) . *£*fc'Wt, 

fli^^ilWfiJ^i*^*^^*^*^*^***^** (utility) 
f^(^|5t^ll!). 1222, i$l%4fttk&$kft^%'&%-f' 

* if - £ 4* * it. ft >iMli * * ' 4H*i**» # *^ 4T * * ( * *» *. ^* 

#>f&3L£ 308) . + 
DPpri. 

— .&i**jL£#fc:&*3£Jfera**T DPpri, *«.i*^i5*«.^ 

DPpri. Q 13 ^WMW^^^^ft^^S 
1300. *^i*i^^**tT«^e*«*AT**A4L^^^lH-« 
JMfi&g^Ht. 1302, T^XiL^^i^^^r iftif^^^M., 

506 #*.J|:±>fr4**#.JL 308 *-iHlitt*"#tt**Mfc**!* 524. >^ 
JW*.Jffffl 10-12 ^^i-^ta. *»*^-f**.X#^T^*^*»# 
#^*M«^#:, J3'J*'J/fl#: 1306^^5i#^*t«. £#tl306, iZ&M. 

£J& 1308, **.JLiW^ < 6^-¥-^**. f RAND 508 
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ift m U 3S14/16M 



( SKEY=f ( RAND ) ) *#*U£*M$^43 ( ) . 

1310, i£i£J.#'J/fl*}-#^ SKEY Xt*»*W^ifc4fc*4«*it^jlf*»5* 
DPpri DPpri + (# 

&#&4fl:&=*'J/fl SKEYJ&£^ (IV2, DPpri, DPpri ) ) . *T»X^ 
^jjl— ^^Mfcl^* (IV2) . ^^1312, **.Aiii±«. DPpri $t?<]#J*i 
&i*J*4U? DPpri DPpri #5fc#*t. *>3UiT tb^^:^^ ( #J 
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